github: MCP allowlists in enterprise managed settings
GitHub added enterprise-managed settings to centrally control which MCP servers GitHub Copilot clients can run. Enterprise owners can now use `allowedMcpServers` and `deniedMcpServers` to allowlist or block specific MCP servers.